Overview

overview

10

Static

static

3

40ac1cd24c...18.exe

windows7-x64

10

40ac1cd24c...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    40ac1cd24cadd86f91ef6545ad820a55_JaffaCakes118

  • Size

    340KB

  • Sample

    240713-hx5cyatamh

  • MD5

    40ac1cd24cadd86f91ef6545ad820a55

  • SHA1

    9b9f6638ed53bb5d3df4060527343eb0ccf0859f

  • SHA256

    6ac00b855fea6ca9b475c37a0d10418e6d18331c7b2cb615fd9fa2218a9b1f5b

  • SHA512

    bb6b108d0eb569ab59edb9524d60f5f4f3e297d2ef21784eb0770937d6ba4fb5dca38da5ab8986b1969b0ae6152aace0d4f987c408e25912fde559017ce314d1

  • SSDEEP

    6144:9tOdKF7Yta2UM5IxXF/tIKAL7iFE7sNBo+aa9R3HJxvkSuM4PydZAx+q:e1tUM5aV/oLOVfhaa9ZpVSx+q

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      40ac1cd24cadd86f91ef6545ad820a55_JaffaCakes118

    • Size

      340KB

    • MD5

      40ac1cd24cadd86f91ef6545ad820a55

    • SHA1

      9b9f6638ed53bb5d3df4060527343eb0ccf0859f

    • SHA256

      6ac00b855fea6ca9b475c37a0d10418e6d18331c7b2cb615fd9fa2218a9b1f5b

    • SHA512

      bb6b108d0eb569ab59edb9524d60f5f4f3e297d2ef21784eb0770937d6ba4fb5dca38da5ab8986b1969b0ae6152aace0d4f987c408e25912fde559017ce314d1

    • SSDEEP

      6144:9tOdKF7Yta2UM5IxXF/tIKAL7iFE7sNBo+aa9R3HJxvkSuM4PydZAx+q:e1tUM5aV/oLOVfhaa9ZpVSx+q

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks